RHSA-2026:22422HighCVSS 7.5
Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.10.3
🔗 CVE IDs covered (1)
📋 Description
CVE-2026-32280 — crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building
🎯 Affected products21
- multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-image-service-rhel9@sha256:334ef53e1e7054c86f691aa9a04ae13994d7dc778da3bd4e292d02513b5e4bf8_amd64 as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-image-service-rhel9@sha256:45966dfd3059467b9a43ca8d2ff8b864fd58ef09ad0405f61329a69486222fe3_arm64 as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-image-service-rhel9@sha256:711352a13eadef04e0d57fd6c9a699da9924f65ecb1a8368dabd3cbe6bcef835_s390x as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-image-service-rhel9@sha256:d67530d9db7c7976ebb682f5dd71713896ae0f34a305d094fcf465eb12520846_ppc64le as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9@sha256:1cce0b4d8ea02811182974ca3ffb74a4455111d0af0d62b76f8fc143c4679c35_s390x as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9@sha256:45358b0f7da8665aad68ce19773827a07a9926dabdb33ecf8de6e21652de001c_amd64 as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9@sha256:4625e34eb7fe3ec65b9e9917557f24e5b9609c03944b8d5802a152b1d8bfea8d_arm64 as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9@sha256:74dcc8ba742e05f77478e9b9b272b6e7cf6b1259fa04ee52613df925250be3a9_ppc64le as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9@sha256:0273ab4a51c9860b8e72c0cb5c29eec7ca3a8b64465d33e2866d1bf750e536e7_amd64 as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9@sha256:8bc040680e14c429ed6ff5150295e2a9a41be02e1aedd14177e58b7ba4545a2f_ppc64le as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9@sha256:dc6ce88161aee0e2d9de97cac68a692dc14b6cdee1e8cd6825d5a5afab75832b_arm64 as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9@sha256:e32ab427867c26eb7a63bdd12c46bb9c89c2a7c5cdeefc0e548b1812075e4d93_s390x as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-installer-rhel9@sha256:6a0fdf9790f5657551b2db36c08df9845a474a834c188afd173038fcd26d88bf_s390x as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-installer-rhel9@sha256:6b50176e0e4bfb3d382101e06085bc606806290fa2a9b82c5439dd5f103de3a7_ppc64le as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-installer-rhel9@sha256:b9c4d9ae302edec84e7dd634c6a2166c35753d96ff49325d918acae2d5353089_amd64 as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-installer-rhel9@sha256:f775ff0d556d9b052c19035e0d227025e5a65c4395794fe725ccd46022e31d4d_arm64 as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-service-9-rhel9@sha256:3b3f76b1de8ea85b5f941a869a7e7ba202afdbbc436c070fd91819b9f04be890_arm64 as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-service-9-rhel9@sha256:71a13b2ca48a940d9c73ab43c9c855da6b8f34ffe72975797865f2a4ea2b69d6_s390x as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-service-9-rhel9@sha256:8b26ed3030afd3da20640f855979059ceb523743e57f3d8f4406e1ee15f01d3e_ppc64le as a component of multicluster engine for Kubernetes 2.10
- registry.redhat.io/multicluster-engine/assisted-service-9-rhel9@sha256:f7c2134ef6e55d4e06b3dad17d583ab35ef50bd27c36dd3ca1c59b2c5f48b122_amd64 as a component of multicluster engine for Kubernetes 2.10
✅ Remediation
For more information about Assisted Installer, see the following documentation: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#cim-intro For multicluster engine for Kubernetes, see the following documentation for details on how to install the images: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro This documentation will be available after the general availability release of Red Hat Advanced Cluster Management 2.15.